ci: add Claude Code PR review

[bartlomieju]

No description provided.

[Copilot]

Pull Request Overview

This PR adds a new GitHub Actions workflow to automatically review pull requests using Claude Code's AI capabilities.

• Introduces a new workflow that triggers on PR opens and synchronizes
• Configures Claude Code action to review PRs with focus on code quality, bugs, security, and performance
• Sets up necessary permissions and tool allowances for PR commenting and review

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

Warning

Rate limit exceeded

@bartlomieju has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 8 minutes and 18 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

📥 Commits

Reviewing files that changed from the base of the PR and between da0e244 and 7d06421.

📒 Files selected for processing (1)

• .github/workflows/claude_pr_review.yml (1 hunks)

Note

Other AI code review bot(s) detected

CodeRabbit has detected other AI code review bot(s) in this pull request and will avoid duplicating their findings in the review comments. This may lead to a less comprehensive review.

Walkthrough

Adds a GitHub Actions workflow "Claude Auto Review" that runs on pull_request (opened, synchronize). The job runs on ubuntu-latest, checks out the repo, sets up Node.js v20, installs claude-code globally, writes a prompt file containing repo and PR context, and runs claude-code in auto mode with a restricted toolset. The workflow uses GH_TOKEN and Anthropic credentials from secrets and invokes GitHub CLI (gh pr) for posting review comments.

Sequence Diagram

sequenceDiagram
    participant GHA as GitHub Actions
    participant Runner as ubuntu-latest
    participant Node as Node.js v20
    participant Claude as claude-code
    participant GH as GitHub API (gh CLI)
    rect rgb(240,248,255)
    Note over GHA,Runner: Trigger on PR opened/synchronize
    end
    GHA->>Runner: checkout repository
    Runner->>Node: setup-node@v3 (Node v20)
    Runner->>Runner: npm install -g claude-code
    Runner->>Runner: create temp prompt file (repo, PR number, focus)
    Runner->>Claude: run `claude-code` --auto --prompt-file
    rect rgb(245,255,240)
    Claude->>Claude: analyze PR using allowed tools only
    Claude->>GH: post comments via `gh pr` commands (inline comments)
    end
    GHA->>GHA: finish job

Loading

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

• Inspect workflow triggers, job permissions, and timeout
• Verify correct use of secrets (GH_TOKEN, Anthropic keys) and environment variable export
• Review claude-code invocation flags and allowed tools list for safety and correctness
• Check prompt generation logic and formatting used for automated comments
• Validate use of gh pr commands and comment placement approach

Pre-merge checks and finishing touches

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	No description was provided, which is a miss for documentation, but the PR objective clearly shows intent and the title is self-explanatory for this straightforward CI addition.	Add a brief description explaining the workflow's purpose, triggers, and what Claude Code will review in PRs.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'ci: add Claude Code PR review' accurately describes the main change—adding a GitHub Actions workflow for automated PR reviews using Claude Code.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}